CVE-2026-34040

Description

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

References

https://github.com/m0nk3ygod/CVE-2026-34040-PoC

https://thehackernews.com/2026/04/docker-cve-2026-34040-lets-attackers.html

https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2

https://github.com/moby/moby/releases/tag/docker-v29.3.1

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-17289

Details

Source: Mitre, NVD

Named Vulnerability: GO-2026-4887Named Vulnerability: GHSA-x744-4wpc-v9h2

Risk Information

CVSS v2

CVSS v3

EPSS